Attorney Docket No. YOR920010746US1 
REMARKS 

Claims 1- 3 and 7-9 and 13-18 are rejected under 35 U.S.C. §102 as being anticipated by 
U.S. Patent No. 6,529,954 (hereinafter "Cookmeyer"). Claims 4-6, 10-12 and 19 are rejected under 
35 U.S.C. §103 as being unpatentable over Cookmeyer and Ma et al., "Mining Event Data for 
Actionable Patterns," 2000 (hereinafter "Ma"). 

While Applicants believe that the claims in their form prior to this amendment are patentable 
over Cookmeyer and/or Ma, in the sole interest of expediting the case through to issuance. 
Applicants have nonetheless canceled claims 1-6 and 8-18 and amended independent claims 7 and 
19. 

Applicants assert that neither Cookmeyer nor Ma, alone or in combination, disclose a 
computer-based method of providing decision support to an analyst in accordance with an event 
management system which manages a network with one or more computing devices, the method 
comprising the steps of: automatically analyzing, off-line, data representing past events associated 
with the network of computing devices being managed by the event management system, the 
automated off-line analysis comprising generation of one or more visualizations of one or more 
portions of the past event data and discovery of one or more patterns in the past event data; and 
automatically managing rules off-line, the automated off-line rule management comprising 
construction and validation of one or more rules formed in accordance with the automated off-line 
analysis of the past event data, wherein one or more rules are constructed offline and validated 
offline based directly on at least a portion of the one or more visualizations generated offline from 
the corresponding offline analysis of the one or more portions of the past event data and the offline 
discovery of at least a portion of the one or more patterns in the past event data; wherein the past 
event data is obtained from an event database and the one or more rules are provided to a rule 
database, the event database and the rule database being associated with an execution system of the 
event management system; wherein generation of the one or more visualizations of the one or more 
portions of the past event data further comprises: selecting a subset of the past event data from the 
event database; generating a visualization of the subset of past event data using a visualization tool; 
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the analyst reviewing the visualization to determine whether there are any groupings of events that 
are of interest presented therein; and performing an appropriate action when an event grouping of 
interest is found; wherein discovery of the one or more patterns in the past event data further 
comprises: selecting a subset of the past event data from the event database; mining the subset of the 
past event data to discover the one or more patterns using a mining tool; generating a visualization 
of the one or more patterns using a visualization tool; the analyst reviewing the visualization to 
determine whether there are any patterns of interest presented therein; and performing an appropriate 
action when a pattern of interest is found; wherein validation of the one or more rules further 
comprises: selecting a subset of the past event data from the event database; finding one or more 
instances of patterns expressed in terms of left-hand sides of rules; generating a visualization of the 
one or more pattern instances using a visualization tool; analyzing the left-hand sides of rules using a 
rule validation tool; displaying results of the analysis operation; the analyst assessing analysis 
results; and marking the rules as one of validated and not validated based on the assessment by the 
analyst; wherein construction of the one or more rules further comprises: selecting a subset of the 
past event data from the event database; mining the subset of the past event data to discover the one 
or more patterns using a mining tool; assessing significance of the one or more patterns using a 
visualization tool; constructing the one or more rules from a selected subset of the one or more 
patterns using a rule construction tool; and writing the one or more rules in the rule database, as 
recited in amended claim 7. Independent claim 19 recites similar limitations. . 

In view of the foregoing. Applicants believe that claims 7 and 19 are in condition for 
allowance, and respectfiiUy request withdrawal of the rejections. 



Respectfully submitted. 



Date: April 22, 2008 
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